Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/356552-312a-44ce-8677-405505fc460e/1/TkB_fq2BapVV9HrxCQPvRcgXC4I.mft
File: TkB_fq2BapVV9HrxCQPvRcgXC4I.mft (raw, json)
Hash identifier: Vq3zzJ5XGNw5Jqsheu5pLSCGOltItwKCr0ymbWnNE+8=
Subject key identifier: A2:D7:25:FC:F4:66:7A:3C:3E:F0:62:AE:25:6D:F9:4C:8D:51:3F:5E
Authority key identifier: 4E:40:7F:7E:AD:81:6A:95:55:F4:7A:F1:09:03:EF:45:C8:17:0B:82
Certificate issuer: /CN=4e407f7ead816a9555f47af10903ef45c8170b82
Certificate serial: 01968E14DB227D04D6595C59FA7462C54CEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TkB_fq2BapVV9HrxCQPvRcgXC4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/356552-312a-44ce-8677-405505fc460e/1/TkB_fq2BapVV9HrxCQPvRcgXC4I.mft
Manifest number: 0600
Signing time: Thu 01 May 2025 23:00:53 +0000
Manifest this update: Thu 01 May 2025 23:00:53 +0000
Manifest next update: Fri 02 May 2025 23:00:53 +0000
Files and hashes: 1: TkB_fq2BapVV9HrxCQPvRcgXC4I.crl (hash: x9jOPJRb0et03e8SG0CrAhktduCUhvMAkGNSTQEfktQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/356552-312a-44ce-8677-405505fc460e/1/TkB_fq2BapVV9HrxCQPvRcgXC4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/356552-312a-44ce-8677-405505fc460e/1/TkB_fq2BapVV9HrxCQPvRcgXC4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/TkB_fq2BapVV9HrxCQPvRcgXC4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8e:14:db:22:7d:04:d6:59:5c:59:fa:74:62:c5:4c:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e407f7ead816a9555f47af10903ef45c8170b82
Validity
Not Before: May 1 23:00:53 2025 GMT
Not After : May 2 23:00:53 2025 GMT
Subject: CN=a2d725fcf4667a3c3ef062ae256df94c8d513f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1f:ad:0c:29:63:b4:65:d5:8c:42:7e:2b:87:
6f:29:2e:ab:bf:f4:8b:76:cd:88:ee:8c:04:b7:be:
6d:ee:f5:bd:f6:97:1c:f7:f8:eb:1c:f0:58:06:4d:
e8:fb:0b:90:ac:62:ec:a4:d0:c0:18:46:1b:ca:db:
2a:68:f5:a2:8f:ae:01:28:86:26:c6:b8:5c:39:5e:
87:bf:aa:a6:06:ee:c6:ee:70:f3:bb:71:83:5f:65:
3b:8e:95:f5:b6:ea:11:7a:85:09:66:3c:c5:1a:19:
87:b8:b5:0b:d8:9f:16:80:ce:cb:11:51:22:a6:86:
62:09:31:3b:b9:43:1c:9c:c0:35:8f:b3:1b:32:9f:
f4:61:7f:b4:a3:9f:41:a9:6d:a5:61:93:f7:98:d2:
97:9b:0a:6f:a2:99:69:32:f5:e1:2f:07:e4:ff:f2:
0b:2b:7b:be:e6:c2:39:e0:06:7b:4e:d4:63:74:0e:
48:81:8d:50:ed:d6:20:8c:2a:6a:f8:ca:12:7b:6d:
4e:a5:47:c8:8a:4f:c8:9b:7c:0b:bc:c0:e4:e6:07:
27:08:1b:2b:a4:d8:d2:fb:c9:71:21:98:d4:d9:e4:
34:a1:fa:da:10:93:58:28:5b:d6:7f:8f:7a:1a:83:
20:43:ab:af:1a:ce:12:f2:1c:28:e0:29:97:c5:b4:
62:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D7:25:FC:F4:66:7A:3C:3E:F0:62:AE:25:6D:F9:4C:8D:51:3F:5E
X509v3 Authority Key Identifier:
keyid:4E:40:7F:7E:AD:81:6A:95:55:F4:7A:F1:09:03:EF:45:C8:17:0B:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkB_fq2BapVV9HrxCQPvRcgXC4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/356552-312a-44ce-8677-405505fc460e/1/TkB_fq2BapVV9HrxCQPvRcgXC4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/356552-312a-44ce-8677-405505fc460e/1/TkB_fq2BapVV9HrxCQPvRcgXC4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:d7:71:59:a2:cc:39:d4:d5:84:d0:35:17:bb:b7:b6:3b:4b:
91:b9:4b:4e:95:a9:d3:67:06:93:77:c2:04:7a:2e:d4:b5:3f:
7b:ac:45:cc:9b:13:3b:84:29:2f:47:b1:a5:28:db:a8:1a:53:
30:6a:57:03:48:ec:f1:cc:34:51:e6:2e:cb:23:c1:e8:d0:39:
00:01:a9:42:54:ca:c4:ff:cc:5d:dd:57:33:bb:30:2a:13:c3:
aa:9d:b7:88:60:1c:53:d5:93:8f:1a:be:30:a8:c7:ed:ba:a4:
6e:e4:a8:e1:05:aa:59:00:1f:9b:90:78:93:bb:65:b6:5e:f6:
6e:25:11:16:79:16:df:6f:2b:03:a7:dc:46:f0:51:f4:55:9f:
c0:66:61:8c:c1:75:9b:6e:d4:29:66:f8:4d:31:fa:36:ef:88:
6e:ff:d0:80:57:43:0f:1f:0a:da:a9:13:40:b4:bc:97:bb:df:
41:93:db:93:71:dd:d9:70:6e:ed:a6:c6:6b:68:bb:97:e0:fb:
1f:5c:10:73:1a:18:6b:d3:ad:d7:2a:72:c6:30:a5:79:3f:b8:
16:9d:b8:51:a6:10:3c:2a:5f:51:14:90:44:20:f4:d8:7c:0f:
94:0d:53:13:5f:9a:98:ad:47:fc:fe:27:1a:f6:8e:3b:50:be:
6d:92:38:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 01:44:36 2025 by rpki-client